neon 8.13.2 → 8.15.0

package/dist/errors.js

@@ -1,4 +1,4 @@
-//#region src/errors.ts
+// src/errors.ts
 const ERROR_MATCHERS = [
 	[/^Unknown command: (.*)$/, "UNKNOWN_COMMAND"],
 	[/^Missing required argument: (.*)$/, "MISSING_ARGUMENT"],
@@ -72,5 +72,4 @@ const isNetworkError = (err) => {
 	}
 	return false;
 };
-//#endregion
 export { NETWORK_ERROR_MESSAGE, isNetworkError, isUnexpectedError, matchErrorCode };

package/dist/functions/registry.js

@@ -1,4 +1,4 @@
-//#region src/functions/registry.ts
+// src/functions/registry.ts
 const MAX_PATH_LENGTH = 255;
 const MAX_FILE_BYTES = 262144;
 const MAX_TOTAL_BYTES = 2097152;
@@ -48,5 +48,4 @@ const parseTemplateItem = (text, validate, expectedId) => {
 		...operations ? { operations } : {}
 	};
 };
-//#endregion
 export { MAX_FILE_BYTES, MAX_JSON_BYTES, MAX_TOTAL_BYTES, isContainedRelativePath, parseRegistryIndex, parseTemplateItem, recommendedOperations, resolveOperationById };

package/dist/functions/scaffold.js

@@ -5,7 +5,7 @@ import { FUNCTION_SLUG_HELP, FUNCTION_SLUG_PATTERN, deriveFunctionSlug } from ".
 import { resolveOperationById } from "./registry.js";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, resolve } from "node:path";
-//#region src/functions/scaffold.ts
+// src/functions/scaffold.ts
 const operationsFromFlags = (template, choice) => {
 	const operations = template.operations ?? [];
 	const explicit = choice.operations ?? [];
@@ -145,5 +145,4 @@ const planEnvExample = (projectRoot, environment) => {
 		added: missing.map(({ name }) => name)
 	};
 };
-//#endregion
 export { collidingFiles, operationsFromFlags, planConfigRegistration, planEnvExample, planScaffold, writeScaffold };

package/dist/functions/source.js

@@ -1,7 +1,7 @@
 import { MAX_FILE_BYTES, MAX_JSON_BYTES, MAX_TOTAL_BYTES, isContainedRelativePath, parseRegistryIndex, parseTemplateItem } from "./registry.js";
 import { readFileSync, realpathSync, statSync } from "node:fs";
 import { posix, resolve, sep } from "node:path";
-//#region src/functions/source.ts
+// src/functions/source.ts
 const DEFAULT_REGISTRY_URL = "https://neon.com/functions/registry/registry.json";
 const GITHUB_REGISTRY_URL = "https://raw.githubusercontent.com/neondatabase/examples/main/registry/registry.json";
 const REGISTRY_DIR_ENV = "NEON_FUNCTION_REGISTRY_DIR";
@@ -177,5 +177,4 @@ const openRegistryAt = async (source, files = source) => {
 		load
 	};
 };
-//#endregion
 export { DEFAULT_REGISTRY_URL, GITHUB_REGISTRY_URL, REGISTRY_DIR_ENV, REGISTRY_URL_ENV, RegistryError, describeRegistrySource, openRegistry, resolveRegistrySource, templateSourcePaths };

package/dist/functions_api.js

@@ -1,5 +1,5 @@
 import "./api.js";
-//#region src/functions_api.ts
+// src/functions_api.ts
 const functionsPath = (projectId, branchId) => `/projects/${encodeURIComponent(projectId)}/branches/${encodeURIComponent(branchId)}/functions`;
 const listFunctions = async (apiClient, projectId, branchId, { cursor, limit } = {}) => {
 	const { data } = await apiClient.request({
@@ -46,5 +46,4 @@ const createDeployment = async (apiClient, projectId, branchId, slug, params) =>
 		secure: true
 	});
 };
-//#endregion
 export { createDeployment, deleteFunction, getFunction, listFunctions };

package/dist/help.js

@@ -2,7 +2,7 @@ import { globalOptionsTrailer, helpWidth, wrapHelpText } from "./utils/help_text
 import { consumeBlockIfMatches, consumeNextMatching, drawPointer, splitColumns } from "./utils/ui.js";
 import chalk from "chalk";
 import cliui from "cliui";
-//#region src/help.ts
+// src/help.ts
 const SPACE_WIDTH = 20;
 const DESCRIPTION_GUTTER = 4;
 const wrapDescription = (text) => wrapHelpText(text, Math.max(1, helpWidth() - SPACE_WIDTH - DESCRIPTION_GUTTER));
@@ -285,5 +285,4 @@ const isBareParentCommand = (argv, positionals) => {
 	const path = internals.getContext().commands;
 	return path.length > 0 && positionals.length === path.length && internals.getCommandInstance().getCommands().length > 0;
 };
-//#endregion
 export { UsageError, failOnUsageError, isBareParentCommand, showHelp, showUsageErrorHelp };

package/dist/human_table.js

@@ -1,6 +1,6 @@
 import { isObject } from "./utils/string.js";
 import chalk from "chalk";
-//#region src/human_table.ts
+// src/human_table.ts
 const GUTTER = 2;
 const MIN_COL = 3;
 const ELLIPSIS = "...";
@@ -225,5 +225,4 @@ function charWidth(code) {
 	}
 	return 1;
 }
-//#endregion
 export { displayWidth, formatHumanChunk, parseColumns, resolveOutputWidth, stripAnsi, titleCaseField, truncateTo };

package/dist/index.js

@@ -2,14 +2,14 @@ import { log } from "./log.js";
 import pkg_default from "./pkg.js";
 import { UnreadableResponseError, codeFromBody, isNeonApiError, messageFromBody } from "./api.js";
 import { getAuthContext } from "./auth_context.js";
-import { r as defaultDir } from "./_chunks/paths-DMq0Lt7a.js";
+import { r as defaultDir } from "./_chunks/paths-B55ZfOg1.js";
 import { ensureConfigDir } from "./config.js";
 import { currentContextFile, enrichFromContext } from "./context.js";
 import { NETWORK_ERROR_MESSAGE, isNetworkError, matchErrorCode } from "./errors.js";
 import { analyticsMiddleware, closeAnalytics, initAnalyticsClientMiddleware, isAnalyticsActive, recordCommandSuccessExtras, sendError, takeCommandSuccessExtras, trackCommandSuccess } from "./analytics.js";
 import { AuthRefreshError, defaultClientID } from "./auth.js";
 import { getCliName } from "./utils/cli_name.js";
-import { c as ensureAuth } from "./_chunks/auth-CIUtXByB.js";
+import { c as ensureAuth } from "./_chunks/auth-rup6nemJ.js";
 import { recoverFrom401 } from "./auth_recovery.js";
 import { UsageError, failOnUsageError, isBareParentCommand, showHelp, showUsageErrorHelp } from "./help.js";
 import { lazyCommands, preloadCommand } from "./commands/manifest.js";
@@ -21,7 +21,7 @@ import { collapseRepeatedFlags, declaredOptions } from "./utils/repeated_flags.j
 import { stagingFeaturesEnabledForArgv } from "./utils/staging.js";
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
-//#region src/index.ts
+// src/index.ts
 const NO_SUBCOMMANDS_VERBS = [
 	"api",
 	"auth",
@@ -250,5 +250,4 @@ async function handleError(msg, err, canRetry) {
 		}
 	}
 })();
-//#endregion
 export {};

package/dist/init/agents.js

@@ -1,6 +1,6 @@
 import { agentSupportsHttpMcp, agentSupportsProjectMcp, detectInstalledAgents, getAgentDisplayName, listMcpAgentIds, resolveAddMcpAgentId, tryResolveAddMcpAgentId, uniqueAgentIds } from "../mcp/agents.js";
 import { agents } from "add-mcp";
-//#region src/init/agents.ts
+// src/init/agents.ts
 const SKILLS_AGENT_BY_TYPE = {
 	cursor: "cursor",
 	vscode: "github-copilot",
@@ -47,5 +47,4 @@ function skillsPickerOptions() {
 		hint: "agent skills"
 	}));
 }
-//#endregion
 export { agentPickerHint, agentSupportsHttpMcp, agentSupportsProjectMcp, detectInstalledAgents, getAgentDisplayName, getSkillsAgentName, listMcpAgentIds, mcpPickerOptions, resolveAddMcpAgentId, skillsPickerOptions, supportsSkills, tryResolveAddMcpAgentId, uniqueAgentIds };

package/dist/init/auth.js

@@ -1,12 +1,12 @@
 import { isNeonApiError } from "../api.js";
-import { r as defaultDir } from "../_chunks/paths-DMq0Lt7a.js";
+import { r as defaultDir } from "../_chunks/paths-B55ZfOg1.js";
 import "../config.js";
 import "../auth.js";
-import { c as ensureAuth } from "../_chunks/auth-CIUtXByB.js";
+import { c as ensureAuth, l as existingApiClient } from "../_chunks/auth-rup6nemJ.js";
 import { recoverFrom401 } from "../auth_recovery.js";
-import { c as pull } from "../_chunks/env-5HS5qQGd.js";
-import { c as setupNeonMcp } from "../_chunks/mcp-Bo-7TKc7.js";
-//#region src/init/auth.ts
+import { c as pull } from "../_chunks/env-BOt9AZ1j.js";
+import { c as setupNeonMcp } from "../_chunks/mcp-BznTRK3w.js";
+// src/init/auth.ts
 const isUnauthorized = (error) => isNeonApiError(error) && error.status === 401;
 const authenticationFailed = () => /* @__PURE__ */ new Error("Authentication failed.");
 /**
@@ -54,6 +54,27 @@ const runAuthenticatedMcp = async (options) => {
 	}
 };
 /**
+* The client and key `neon config init` may read the linked branch with. Init calls this only
+* after a link is verified, but a pin that was already in place can have no credentials on
+* disk, so this never starts a login: with nothing usable it returns an empty result and the
+* scaffold declares the Neon Auth default with a warning, as a failed read does.
+*/
+const resolveInitConfigApi = async (options) => {
+	const access = await existingApiClient({
+		configDir: options.configDir ?? defaultDir,
+		apiHost: options.apiHost ?? "https://console.neon.tech/api/v2",
+		...options.profile !== void 0 ? { profile: options.profile } : {},
+		...options.oauthHost !== void 0 ? { oauthHost: options.oauthHost } : {},
+		...options.clientId !== void 0 ? { clientId: options.clientId } : {}
+	});
+	if (access === null) return {};
+	return {
+		apiClient: access.apiClient,
+		apiKey: access.apiKey,
+		apiHost: options.apiHost
+	};
+};
+/**
 * Resolves Neon auth the same way a standalone `neon env pull` invocation would, then runs
 * `pull` — the same function `link`/`checkout` already call directly via
 * `autoPullEnvAfterPin` (see `commands/env.ts`).
@@ -77,5 +98,4 @@ const pullInitEnv = async (props) => {
 		throw authenticationFailed();
 	}
 };
-//#endregion
-export { pullInitEnv, runAuthenticatedMcp };
+export { pullInitEnv, resolveInitConfigApi, runAuthenticatedMcp };

package/dist/init/bootstrap.js

@@ -2,7 +2,7 @@ import { chmodSync, existsSync, lstatSync, mkdirSync, readdirSync, rmSync, statS
 import { dirname, join } from "node:path";
 import YAML from "yaml";
 import { gunzipSync } from "fflate";
-//#region src/init/bootstrap.ts
+// src/init/bootstrap.ts
 /** Default features when a template doesn't specify `requires`. */
 const DEFAULT_REQUIRES = ["database"];
 /**
@@ -368,5 +368,4 @@ const scaffoldTemplate = async (template, targetDir, options = {}) => {
 	}
 	return files.length;
 };
-//#endregion
 export { BootstrapInputError, FALLBACK_TEMPLATES, downloadTemplate, ensureTargetUsable, fetchTemplates, findTemplate, parseManifest, parseTar, scaffoldTemplate, selectTemplateFiles, templateIds };

package/dist/init/build_config.js

@@ -1,4 +1,3 @@
-//#region src/init/build_config.ts
+// src/init/build_config.ts
 const INTERNAL_VSX_GALLERY = "";
-//#endregion
 export { INTERNAL_VSX_GALLERY };

package/dist/init/cancelled.js

@@ -1,4 +1,4 @@
-//#region src/init/cancelled.ts
+// src/init/cancelled.ts
 var InitCancelled = class extends Error {
 	constructor() {
 		super("Aborted.");
@@ -37,5 +37,4 @@ const restoreCursor = () => {
 const restoreCursorVisibilityOnAbort = (state) => {
 	if (state.aborted) process.stdout.write("\x1B[?25h");
 };
-//#endregion
 export { InitCancelled, raceSigint, restoreCursor, restoreCursorVisibilityOnAbort };

package/dist/init/choices.js

@@ -1,6 +1,6 @@
 import { FUNCTION_SLUG } from "../config_template.js";
-import { l as functionBaseUrlKey } from "../_chunks/env-BpP3Dqpe.js";
-//#region src/init/choices.ts
+import { l as functionBaseUrlKey } from "../_chunks/env-JgoSsmyt.js";
+// src/init/choices.ts
 const INIT_CONFIG_SERVICES_CONFLICT = "--no-config cannot be combined with --services.";
 const resolveInitConfigChoice = (input) => {
 	if (input.flag === false && input.services !== void 0) throw new Error(INIT_CONFIG_SERVICES_CONFLICT);
@@ -41,5 +41,4 @@ const initEnvPullAfterConfig = (input) => {
 		envKeys: input.declared.includes("functions") ? [functionBaseUrlKey(FUNCTION_SLUG)] : []
 	};
 };
-//#endregion
 export { INIT_CONFIG_SERVICES_CONFLICT, configPlanFromResolution, initEnvPullAfterConfig, resolveInitConfigChoice };

package/dist/init/chrome.js

@@ -1,7 +1,7 @@
 import { isCi } from "../env.js";
 import { HEADING_CANCELLED, HEADING_COMPLETE, HEADING_FAILED, HEADING_PENDING, INIT_SUBTITLE } from "./copy.js";
 import chalk from "chalk";
-//#region src/init/chrome.ts
+// src/init/chrome.ts
 const NEON_GREEN = "#4BB578";
 const INIT_BANNER_LINES = [
 	" ██╗  ██╗██████╗ ██████╗ ██╗  ██╗",
@@ -118,5 +118,4 @@ const headingForKind = (kind) => {
 		default: return kind;
 	}
 };
-//#endregion
 export { INIT_BANNER_LINES, NEON_GREEN, agentSetupDoneLabel, agentSetupLabel, agentsRowValue, configRowValue, configSummaryLabel, formatInitBanner, formatInitDone, headingForKind, printInitBanner, printInitDone, printInitProgress, projectRowValue, shouldPrintInitBanner };

package/dist/init/copy.js

@@ -1,5 +1,5 @@
 import { getCliName } from "../utils/cli_name.js";
-//#region src/init/copy.ts
+// src/init/copy.ts
 const INIT_SUBTITLE = "Set up coding agents and this directory for Neon.";
 const MODE_MESSAGE = "How would you like to set up Neon?";
 const MODE_RECOMMENDED_TITLE = "Recommended setup";
@@ -184,5 +184,4 @@ const headingForOutcome = (outcome) => {
 		default: return outcome;
 	}
 };
-//#endregion
 export { AGENTS_NOT_INSTALLED, AGENT_DETECTED_DESCRIPTION, AGENT_MCP_PICKER_MESSAGE, AGENT_MCP_SKIP_MESSAGE, AGENT_OTHER_DESCRIPTION, AGENT_PICKER_MESSAGE, AGENT_PLUGIN_SKIP_MESSAGE, AGENT_SETUP_MESSAGE, AGENT_SETUP_PLUGIN_DESCRIPTION, AGENT_SETUP_PLUGIN_TITLE, AGENT_SETUP_SKILLS_DESCRIPTION, AGENT_SETUP_SKILLS_TITLE, AGENT_SETUP_SKIP_DESCRIPTION, AGENT_SETUP_SKIP_TITLE, AGENT_SKILLS_PICKER_MESSAGE, AGENT_SKILLS_SKIP_MESSAGE, CANCELLED_BODY, CLAIMABLE_ACCOUNT_FLAGS, CLAIMABLE_ALREADY_LINKED, CLAIMABLE_MCP_API_KEY, CLAIMABLE_NO_LINK, CONFIG_CONFIRM_HINT, CONFIG_CONFIRM_MESSAGE, HEADING_CANCELLED, HEADING_COMPLETE, HEADING_FAILED, HEADING_PENDING, INIT_NEEDS_YES, INIT_SUBTITLE, MCP_API_KEY_NEEDS_AUTH, MCP_AUTH_API_KEY_DESCRIPTION, MCP_AUTH_API_KEY_TITLE, MCP_AUTH_MESSAGE, MCP_AUTH_OAUTH_DESCRIPTION, MCP_AUTH_OAUTH_TITLE, MCP_OAUTH_FALLBACK, MCP_SCOPED_NEEDS_PROJECT, MCP_SCOPE_GLOBAL_DESCRIPTION, MCP_SCOPE_GLOBAL_TITLE, MCP_SCOPE_MESSAGE, MCP_SCOPE_PROJECT_DESCRIPTION, MCP_SCOPE_PROJECT_TITLE, MODE_CUSTOM_DESCRIPTION, MODE_CUSTOM_TITLE, MODE_MESSAGE, MODE_RECOMMENDED_DESCRIPTION, MODE_RECOMMENDED_TITLE, NON_TTY_AGENT_SETUP, NON_TTY_LINK_NEEDS_AUTH, NO_AGENTS_FALLBACK_STATUS, NO_AGENT_SETUP_CONFLICT, PACKAGE_MANAGER_MESSAGE, PROGRESS, PROJECT_PINNED_OFFLINE, PROJECT_SETUP_CLAIMABLE_DESCRIPTION, PROJECT_SETUP_CLAIMABLE_TITLE, PROJECT_SETUP_LINK_DESCRIPTION, PROJECT_SETUP_LINK_TITLE, PROJECT_SETUP_MESSAGE, SERVICES_HINT, SERVICES_MESSAGE, SKILLS_PICKER_MESSAGE, agentMissingCommandDescription, claimableNext, claimableThenServicesNext, configInitNext, envPullFailedNext, existingConfigNext, headingForOutcome, installFailedNext, mcpAfterLinkNext, mcpConfigLocationSkipped, mcpConfigLocationUnavailable, mcpKeyFailedNext, namedAgentsUnavailable, newConfigNext, offlinePinNext, skippedLinkNext, toolingFailedNext, unattendedUnauthedNext };

package/dist/init/detect.js

@@ -1,7 +1,7 @@
-import { t as storeFor } from "../_chunks/credential_io-BS-0Pmwc.js";
+import { t as storeFor } from "../_chunks/credential_io-DbeSh3Pl.js";
 import { isCi } from "../env.js";
-import { h as resolveProfile, u as locationOf } from "../_chunks/profiles-DIB1av2Q.js";
-import { i as selectCredential, t as credentialInputs } from "../_chunks/auth_selection-YX5_KZgD.js";
+import { h as resolveProfile, u as locationOf } from "../_chunks/profiles-DTazQtjK.js";
+import { i as selectCredential, t as credentialInputs } from "../_chunks/auth_selection-CwGLN9Qz.js";
 import { detectInstalledAgents, uniqueAgentIds } from "../mcp/agents.js";
 import "./agents.js";
 import { directoryIsEmpty } from "./plan.js";
@@ -9,7 +9,7 @@ import { detectAgent } from "./detect_host.js";
 import { canPickAgentsInteractively } from "../utils/agent_picker.js";
 import { existsSync, readdirSync } from "node:fs";
 import { detectProjectAgents } from "add-mcp";
-//#region src/init/detect.ts
+// src/init/detect.ts
 const listingHasCredentials = (configDir, profile) => {
 	try {
 		return storeFor(configDir).inspect(locationOf(resolveProfile(configDir, profile))).credentials !== null;
@@ -54,5 +54,4 @@ const detectInitEnvironment = async (options) => {
 		ci: isCi()
 	};
 };
-//#endregion
 export { collectDetectedAgents, detectInitEnvironment, hasLocalCredentials };

package/dist/init/detect_host.js

@@ -1,4 +1,4 @@
-//#region src/init/detect_host.ts
+// src/init/detect_host.ts
 const CLAUDE_ENV = ["CLAUDECODE", "CLAUDE_CODE_CHILD_SESSION"];
 const CURSOR_ENV = [
 	"CURSOR_TRACE_ID",
@@ -34,5 +34,4 @@ function detectAgent(env = process.env) {
 	if (env.TERM_PROGRAM === "vscode" || isSet(env.VSCODE_PID) || isSet(env.VSCODE_CWD)) return "vscode";
 	return null;
 }
-//#endregion
 export { detectAgent };

package/dist/init/funnel.js

@@ -5,7 +5,7 @@ import { redactCredentialTokenIds, trackEvent } from "../analytics.js";
 import { AuthRefreshError } from "../auth.js";
 import { randomUUID } from "node:crypto";
 import { stripVTControlCharacters } from "node:util";
-//#region src/init/funnel.ts
+// src/init/funnel.ts
 const CLI_INIT_START = "cli_init_start";
 const CLI_INIT_END = "cli_init_end";
 const FLAG_ALIASES = {
@@ -159,5 +159,4 @@ const finishInitFunnel = (state, outcome, analytics) => {
 		exitError: state.exitError
 	}));
 };
-//#endregion
 export { CLI_INIT_END, CLI_INIT_START, createInitFunnel, createInitRunId, emitInitEnd, emitInitStart, finishInitFunnel, initEndProperties, initErrorCode, initErrorMessage, initFlagsFromArgv, initStartProperties, recordInitError, recordInitExit };

package/dist/init/link.js

@@ -1,11 +1,11 @@
 import { isNeonApiError } from "../api.js";
-import { r as defaultDir } from "../_chunks/paths-DMq0Lt7a.js";
+import { r as defaultDir } from "../_chunks/paths-B55ZfOg1.js";
 import "../config.js";
 import "../auth.js";
-import { c as ensureAuth } from "../_chunks/auth-CIUtXByB.js";
+import { c as ensureAuth } from "../_chunks/auth-rup6nemJ.js";
 import { recoverFrom401 } from "../auth_recovery.js";
-import { s as runLink } from "../_chunks/link-BgtkOBws.js";
-//#region src/init/link.ts
+import { s as runLink } from "../_chunks/link-nAiuWKfg.js";
+// src/init/link.ts
 const isUnauthorized = (error) => isNeonApiError(error) && error.status === 401;
 const authenticationFailed = () => /* @__PURE__ */ new Error("Authentication failed.");
 const runAuthenticatedLink = async (props) => {
@@ -34,5 +34,4 @@ const runAuthenticatedLink = async (props) => {
 		throw authenticationFailed();
 	}
 };
-//#endregion
 export { runAuthenticatedLink };

package/dist/init/mode.js

@@ -1,5 +1,5 @@
 import { INIT_NEEDS_YES, NON_TTY_AGENT_SETUP, NO_AGENT_SETUP_CONFLICT } from "./copy.js";
-//#region src/init/mode.ts
+// src/init/mode.ts
 const hasInitMcpFlags = (input) => input.mcpConfigLocation !== void 0 || input.mcpAuth !== void 0 || input.mcpProjectScoped === true;
 const hasSkillsFlag = (skills) => skills !== void 0 && skills.length > 0;
 const hasCustomizingFlags = (input) => input.skipAgents || input.claimable || hasSkillsFlag(input.skills) || hasInitMcpFlags(input);
@@ -23,5 +23,4 @@ const inferInitAgentSetup = (input) => {
 	if (input.canAsk) return { kind: "ask" };
 	throw new Error(NON_TTY_AGENT_SETUP);
 };
-//#endregion
 export { assertAgentSetupFlags, hasInitMcpFlags, inferInitAgentSetup, resolveInitMode };

package/dist/init/plan.js

@@ -6,7 +6,7 @@ import { pluginsInstallableAgents } from "../plugins/targets.js";
 import { skillsInstallableAgents } from "../skills/targets.js";
 import { agentArgv } from "../utils/agent_flag.js";
 import { isAbsolute, join, relative, resolve } from "node:path";
-//#region src/init/plan.ts
+// src/init/plan.ts
 const directoryIsEmpty = (names) => names.filter((name) => name !== ".git").length === 0;
 const bootstrapInitStep = (yes, agents = []) => [...yes ? [
 	"bootstrap",
@@ -385,5 +385,4 @@ const resolveInitAgentSetup = async (input) => {
 	if (input.interactive) return input.pick();
 	throw new Error(INIT_NEEDS_YES_OR_TERMINAL);
 };
-//#endregion
 export { FALLBACK_SKILLS_AGENTS, INIT_NEEDS_YES_OR_TERMINAL, NAMED_AGENTS_MIXED, NAMED_AGENTS_UNSUPPORTED, assertNamedAgentTooling, bootstrapInitStep, chooseYesAgentTooling, collectYesAgents, directoryIsEmpty, funnelAgentSetup, initPluginAgents, initSkillsMcpAgents, initYesSupportedAgents, linkInputArgv, namedAgentsMixedMessage, namedAgentsNeedSplit, noDetectedAgentsMessage, planAgentSteps, planConfigInitStep, planInitToolingSteps, planLinkStep, planToolingSteps, planYesAgentSteps, postScaffoldActions, projectContextFile, recommendedTooling, resolveInitAgentSetup, resolveNamedAgents, resolveYesAgentList, rewriteUnknownAgentArg, splitInitTooling };

package/dist/init/run.js

@@ -1,5 +1,5 @@
 import { log } from "../log.js";
-import { r as defaultDir } from "../_chunks/paths-DMq0Lt7a.js";
+import { r as defaultDir } from "../_chunks/paths-B55ZfOg1.js";
 import "../config.js";
 import { contextBranch, readContextFile } from "../context.js";
 import { recordCommandSuccessExtras, takeCommandSuccessExtras } from "../analytics.js";
@@ -17,21 +17,21 @@ import { FALLBACK_SKILLS_AGENTS, assertNamedAgentTooling, funnelAgentSetup, plan
 import { inferPackageManager, resolvePackageManager } from "../utils/package_manager.js";
 import { AGENTS_NOT_INSTALLED, CANCELLED_BODY, CLAIMABLE_ACCOUNT_FLAGS, CLAIMABLE_ALREADY_LINKED, CLAIMABLE_MCP_API_KEY, CLAIMABLE_NO_LINK, MCP_API_KEY_NEEDS_AUTH, MCP_SCOPED_NEEDS_PROJECT, NON_TTY_LINK_NEEDS_AUTH, NO_AGENTS_FALLBACK_STATUS, PROGRESS, PROJECT_PINNED_OFFLINE, claimableNext, claimableThenServicesNext, configInitNext, envPullFailedNext, existingConfigNext, installFailedNext, mcpAfterLinkNext, mcpConfigLocationSkipped, mcpConfigLocationUnavailable, mcpKeyFailedNext, namedAgentsUnavailable, newConfigNext, offlinePinNext, skippedLinkNext, toolingFailedNext, unattendedUnauthedNext } from "./copy.js";
 import { agentsRowValue, configRowValue, formatInitDone, headingForKind, printInitBanner, printInitDone, printInitProgress, projectRowValue, shouldPrintInitBanner } from "./chrome.js";
-import { h as initCmd, t as ConfigInstallFailed } from "../_chunks/config-BH_qRHiG.js";
-import { o as quoteFlagValue, s as runLink } from "../_chunks/link-BgtkOBws.js";
+import { h as initCmd, t as ConfigInstallFailed } from "../_chunks/config-BjCm5cfr.js";
+import { o as quoteFlagValue, s as runLink } from "../_chunks/link-nAiuWKfg.js";
 import { runAuthenticatedLink } from "./link.js";
 import { CannotMintApiKeyError } from "../mcp/mint.js";
-import { pullInitEnv } from "./auth.js";
+import { pullInitEnv, resolveInitConfigApi } from "./auth.js";
 import { InitCancelled, raceSigint, restoreCursor } from "./cancelled.js";
 import { pickAgentSetupInteractively, pickInitAgentsInteractively, pickInitConfigInteractively, pickInitMcpAuthInteractively, pickInitMcpConfigLocationInteractively, pickInitModeInteractively, pickInitPackageManagerInteractively, pickInitProjectSetupInteractively, pickInitServicesInteractively, pickInitSkillsInteractively } from "./wizard.js";
 import { runToolingSteps, toolingStepCommandText } from "./tooling.js";
-import { l as create } from "../_chunks/claim-DqAvAvDm.js";
+import { l as create } from "../_chunks/claim-DlLZmcq0.js";
 import { INIT_CONFIG_SERVICES_CONFLICT, configPlanFromResolution, initEnvPullAfterConfig, resolveInitConfigChoice } from "./choices.js";
 import { detectInitEnvironment } from "./detect.js";
 import { createInitFunnel, emitInitStart, finishInitFunnel, initStartProperties, recordInitError, recordInitExit } from "./funnel.js";
 import { assertAgentSetupFlags, hasInitMcpFlags, inferInitAgentSetup, resolveInitMode } from "./mode.js";
 import { resolve } from "node:path";
-//#region src/init/run.ts
+// src/init/run.ts
 const isLinked = (contextFile) => {
 	const projectId = readContextFile(contextFile).projectId;
 	return typeof projectId === "string" && projectId.length > 0;
@@ -130,13 +130,28 @@ const pickOrDetectAgents = async (input) => {
 	return detected;
 };
 const defaultInitConfig = async (input) => {
+	let project = {};
+	if (input.project) try {
+		project = {
+			...await resolveInitConfigApi(input.project.auth),
+			projectId: input.project.projectId,
+			...input.project.branch !== void 0 ? { branch: input.project.branch } : {},
+			...input.project.auth.configDir !== void 0 ? { configDir: input.project.auth.configDir } : {},
+			...input.project.auth.profile !== void 0 ? { profile: input.project.auth.profile } : {},
+			...input.project.auth.oauthHost !== void 0 ? { oauthHost: input.project.auth.oauthHost } : {},
+			...input.project.auth.clientId !== void 0 ? { clientId: input.project.auth.clientId } : {}
+		};
+	} catch (error) {
+		log.warning("Couldn't authenticate to read the Data API on the linked branch (%s); declaring it with Neon Auth.", error instanceof Error ? error.message : String(error));
+	}
 	await initCmd({
 		cwd: input.cwd,
 		install: input.install,
 		silent: true,
 		requireInstall: true,
 		...input.services !== void 0 ? { services: input.services } : {},
-		...input.packageManager !== void 0 ? { packageManager: input.packageManager } : {}
+		...input.packageManager !== void 0 ? { packageManager: input.packageManager } : {},
+		...project
 	});
 };
 const defaultCreateClaimable = async (input) => {
@@ -557,12 +572,19 @@ const runInit = async (props) => {
 			}
 			if (!existingConfig) printInitProgress(PROGRESS.config);
 			printInitProgress(PROGRESS.install(pm));
+			const readableProject = funnel.link !== "skipped" && !pinnedOffline && declared.includes("data-api") ? readContextFile(contextFile) : void 0;
+			const readableBranch = readableProject !== void 0 ? contextBranch(readableProject) : void 0;
 			try {
 				await (props.initConfig ?? defaultInitConfig)({
 					cwd,
 					install: true,
 					packageManager: pm,
-					...planned !== void 0 ? { services: planned } : {}
+					...planned !== void 0 ? { services: planned } : {},
+					...typeof readableProject?.projectId === "string" ? { project: {
+						projectId: readableProject.projectId,
+						...readableBranch !== void 0 ? { branch: readableBranch } : {},
+						auth
+					} } : {}
 				});
 			} catch (error) {
 				if (error instanceof ConfigInstallFailed) {
@@ -784,5 +806,4 @@ const agentsForStep = (tooling, kind) => {
 		default: return kind;
 	}
 };
-//#endregion
 export { runInit };

package/dist/init/template_title.js

@@ -1,5 +1,5 @@
 import chalk from "chalk";
-//#region src/init/template_title.ts
+// src/init/template_title.ts
 const SKIP_TEMPLATE_VALUE = "skip";
 /**
 * The picker label for a template: the title first, then the Neon services it
@@ -11,5 +11,4 @@ const formatTemplateTitle = (template) => {
 	if (!template.services || template.services.length === 0) return template.title;
 	return `${template.title}  ${chalk.dim.italic(template.services.join(" · "))}`;
 };
-//#endregion
 export { SKIP_TEMPLATE_VALUE, formatTemplateTitle };

package/dist/init/tooling.js

@@ -5,14 +5,14 @@ import { MCP_OAUTH_FALLBACK, PROGRESS } from "./copy.js";
 import { CannotMintApiKeyError } from "../mcp/mint.js";
 import { detectAgent } from "./detect_host.js";
 import { AgentSelectionSkipped, canPickAgentsInteractively } from "../utils/agent_picker.js";
-import { a as mcpInstallError, s as reportMcpInstall } from "../_chunks/mcp-Bo-7TKc7.js";
-import { l as reportPluginsInstall, o as installPlugins, s as pluginsInstallError } from "../_chunks/plugins-Dj0H6lDA.js";
-import { c as skillsInstallError, o as installSkills, s as reportSkillsInstall } from "../_chunks/skills-BP6pIm7O.js";
+import { a as mcpInstallError, s as reportMcpInstall } from "../_chunks/mcp-BznTRK3w.js";
+import { l as reportPluginsInstall, o as installPlugins, s as pluginsInstallError } from "../_chunks/plugins-CKOcBuuP.js";
+import { c as skillsInstallError, o as installSkills, s as reportSkillsInstall } from "../_chunks/skills-DKgafm65.js";
 import { runAuthenticatedMcp } from "./auth.js";
 import { raceSigint } from "./cancelled.js";
 import { pickAgentSetupInteractively } from "./wizard.js";
 import { detectProjectAgents } from "add-mcp";
-//#region src/init/tooling.ts
+// src/init/tooling.ts
 const defaultProjectAgents = (cwd) => detectProjectAgents(cwd);
 const TOOLING_STEP_LABELS = {
 	plugins: PROGRESS.plugins,
@@ -184,5 +184,4 @@ const runAgentTooling = async (options) => {
 		agentSetup
 	}));
 };
-//#endregion
 export { runAgentTooling, runToolingSteps, toolingStepCommandText };

package/dist/init/wizard.js

@@ -9,7 +9,7 @@ import { NEON_SKILL_CATALOG, listSkillIds } from "../skills/catalog.js";
 import { InitCancelled, restoreCursorVisibilityOnAbort } from "./cancelled.js";
 import chalk from "chalk";
 import prompts from "prompts";
-//#region src/init/wizard.ts
+// src/init/wizard.ts
 const restoreCursorOnAbort = (state) => {
 	restoreCursorVisibilityOnAbort(state);
 };
@@ -207,7 +207,7 @@ const pickInitServicesInteractively = async () => {
 			{
 				value: "data-api",
 				title: "Data API",
-				description: "Declare an HTTP API for Postgres. Also declares Managed Better Auth."
+				description: "Declare an HTTP API for Postgres. Also declares Managed Better Auth, unless the branch's Data API already uses an external identity provider."
 			},
 			{
 				value: "functions",
@@ -261,5 +261,4 @@ const pickInitLinkInteractively = async () => {
 	return value === true;
 };
 const initAgentIds = () => listMcpAgentIds();
-//#endregion
 export { initAgentIds, pickAgentSetupInteractively, pickInitAgentsInteractively, pickInitConfigInteractively, pickInitLinkInteractively, pickInitMcpAuthInteractively, pickInitMcpConfigLocationInteractively, pickInitModeInteractively, pickInitPackageManagerInteractively, pickInitProjectSetupInteractively, pickInitServicesInteractively, pickInitSkillsInteractively };

package/dist/keyring.js

@@ -1,5 +1,5 @@
 import { createRequire } from "node:module";
-//#region src/keyring.ts
+// src/keyring.ts
 /** Windows Credential Manager stores at most 2560 bytes per item: 1280 UTF-16 code units. */
 const keyringPasswordLimit = (platform) => platform === "win32" ? 1280 : void 0;
 const isPackaged = () => process.pkg !== void 0;
@@ -42,5 +42,4 @@ const tryLoadKeyring = () => {
 		return null;
 	}
 };
-//#endregion
 export { keyringPasswordLimit, tryLoadKeyring };

package/dist/log.js

@@ -1,6 +1,6 @@
 import { isDebug } from "./env.js";
 import { format } from "node:util";
-//#region src/log.ts
+// src/log.ts
 const log = {
 	debug: (...args) => {
 		if (isDebug()) process.stderr.write(`DEBUG: ${format(...args)}\n`);
@@ -15,5 +15,4 @@ const log = {
 		process.stderr.write(`ERROR: ${format(...args)}\n`);
 	}
 };
-//#endregion
 export { log };

package/dist/mcp/agents.js

@@ -1,5 +1,5 @@
 import { agents, detectGlobalAgents, getAgentTypes } from "add-mcp";
-//#region src/mcp/agents.ts
+// src/mcp/agents.ts
 const AGENT_ALIASES = {
 	cursor: "cursor",
 	copilot: "vscode",
@@ -60,5 +60,4 @@ function uniqueAgentIds(ids) {
 	}
 	return out;
 }
-//#endregion
 export { agentSupportsHttpMcp, agentSupportsProjectMcp, detectInstalledAgents, getAgentDisplayName, listMcpAgentIds, resolveAddMcpAgentId, tryResolveAddMcpAgentId, uniqueAgentIds };

package/dist/mcp/install.js

@@ -2,7 +2,7 @@ import { chmodSync, existsSync, readFileSync, writeFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { agents, upsertServer } from "add-mcp";
 import { execFileSync } from "node:child_process";
-//#region src/mcp/install.ts
+// src/mcp/install.ts
 const NEON_MCP_URL = "https://mcp.neon.tech/mcp";
 const NEON_MCP_NAME = "Neon";
 const NEON_MCP_CATEGORIES = [
@@ -212,5 +212,4 @@ function installNeonMcpServer(options) {
 		error: redactSecrets(result.error ?? "Failed to write Neon MCP server config")
 	};
 }
-//#endregion
 export { NEON_MCP_CATEGORIES, NEON_MCP_NAME, NEON_MCP_URL, existingNeonApiKey, installNeonMcpServer, isMcpCategory, isNeonMcpUrl, mcpUnsupportedReason, neonMcpUrl, parseMcpCategories, trackedProjectMcpConfig };

package/dist/mcp/mint.js

@@ -2,8 +2,8 @@ import { log } from "../log.js";
 import { isNeonApiError } from "../api.js";
 import { getCliName } from "../utils/cli_name.js";
 import { mintedKeyName } from "../profile_keys.js";
-import { s as orgIdForProject } from "../_chunks/api_keys-CNnnugbQ.js";
-//#region src/mcp/mint.ts
+import { s as orgIdForProject } from "../_chunks/api_keys-6Xnxl7a8.js";
+// src/mcp/mint.ts
 var CannotMintApiKeyError = class extends Error {
 	constructor() {
 		super("This CLI credential cannot mint API keys. Organization and project-scoped keys cannot create other keys. Sign in with `neon login` or pass a personal API key.");
@@ -71,5 +71,4 @@ async function mintMcpApiKey(options) {
 async function withdrawMintedKey(apiClient, key) {
 	return withdraw(apiClient, key.id, key.orgId);
 }
-//#endregion
 export { CannotMintApiKeyError, mintMcpApiKey, mintedKeyRevokeCommand, withdrawMintedKey };